Service Update Management Assistant (SUMA)
SUMA sets up an automated interface to download fixes from a fix distribution website to your systems. SUMA can be configured to periodically check the availability of specific new fixes and technology levels. Therefore, system administrators do not have to manually retrieve maintenance updates from the web.
When you configure SUMA in an AIX logical partition (LPAR) or as the NIM master, SUMA establishes
a connection to the fix distribution website and downloads the available service update. The fix
distribution website is an IBM server with the domain name of esupport.ibm.com
. If
your configuration contains a firewall that blocks the connection to the fix distribution website,
you must customize the firewall rules to allow SUMA to connect to the following IP addresses:
Current IP address (IPv4 and IPv6) | New IP address (IPv4 and IPv6) | Updates |
---|---|---|
129.42.21.70 2607:f0d0:3901:33:129:42:21:70 |
192.148.6.11 2620:1f7:c010:1:1:1:1:11 |
The current IP is disabled and the new IP is enabled from 1 March 2024, 09:00 AM Eastern Time (ET). |
129.42.56.189 2620:0:6c4:200:129:42:56:189 |
N/A | This IP address is no longer supported from 1 March 2024, 09:00 AM Eastern Time (ET). |
129.42.60.189 2620:0:6c4:200:129:42:60:189 |
N/A | This IP address is no longer supported from 1 March 2024, 09:00 AM Eastern Time (ET). |
- IP addresses for the
esupport.ibm.com
server are changed from the 2023 version of theesupport.ibm.com
server. - Add firewall rules for all new IP addresses. However, do not change or remove the existing firewall rules.
- The port numbers of the fix distribution website can be either 80 for HTTP or 443 for HTTPS.
- PTF
- Specifies a request to download a program temporary fix (PTF), such as
U813941
. Only certain PTFs can be downloaded as an individual fileset. This limitation applies to PTFs that contain either the bos.rte.install or bos.alt_disk_install.rte filesets as well as the PTFs that are released in between Service Packs (SP). Otherwise, you must download the technology level (TL) or service pack (SP). - TL
- Specifies a request to download a specific TL (such as 7200-02).
- SP
- Specifies a request to download a specific SP (such as 7200-02-00).
- Latest
- Specifies a request to download the latest fixes. This value returns the latest service pack or the TL as specified in the FilterML attribute.
To use SUMA, perform the following operations:
- Configuring SUMA to use the proxy settings
- Creating and managing a SUMA task by using the SMIT interface
- SUMA tasks and the command line
- Troubleshooting SUMA error messages
Configuring SUMA to use the proxy settings
#echo “COUNTRY_CODE = country_code” >> /var/suma/data/config.suma
#export SUMA_COUNTRY_CODE=country_code
where
country_code is the country code of your system location based on the following
table:
System location | Country | Country code |
---|---|---|
Sao Paulo | Brazil | BR |
Washington and Dallas | USA | US |
Toronto and Montreal | Canada | CA |
London | UK | GB |
Frankfurt | Germany | DE |
Madrid | Spain | ES |
Sydney | Australia | AU |
Tokyo and Osaka | Japan | JP |
suma -x -a Action=Preview -a RqType=Latest
0500-013 Failed to retrieve list from fix server.
In this instance, you must contact your administrator or determine the steps necessary to allow your system to access the internet.
- Ensure that the bos.ecc_client.rte fileset is installed on the AIX LPAR by
running the following command:
lslpp -h bos.ecc_client.rte
Figure 2. Checking the bpos.ecc_client.rte fileset - Ensure that the config_conn_path command is available in the
bos.ecc_client.rte fileset by running the following command:
lslpp -w /usr/ecc/bin/config_conn_path
Figure 3. config_conn_path command - Configure your proxy settings by completing the following steps:
- Run the smit srv_conn command.
- Select Create/Change Service Configuration and press Enter.
- Select Create/Change Primary Service Configuration and press Enter.
- Set the following fields in the SMIT interface:
Figure 4. Configuring proxy settings Where,
xx.xx.xx.xx
is the IP address of the proxy and5026
is the port number that is used to connect to the proxy settings. When you press Enter, a test connection determines whether the AIX LPAR is authenticated to access the internet by using the proxy settings. The common values for proxy port number are 3138 or 8080. - Run the smit suma_config_base command to access the SUMA base configuration
SMIT interface. Verify the fields that are shown in the Base Configuration
screen capture.
Figure 5. Base Configuration SMIT
Creating and managing a SUMA task by using the SMIT interface
- Run the smit suma command.
- Select Custom/Automated Downloads (Advanced) and press Enter.
- Select Create a New SUMA Task and press Enter.
- Select an option to determine whether you want to save, execute, or run both simultaneously and
press Enter.
Figure 6. Creating and managing a SUMA task - Set the following fields in the SMIT interface and press Enter.
Figure 7. The SMIT interface
SUMA tasks and the command line
- Create
- Edit
- List
- Schedule
- Unschedule
- Delete
- Examples
-
To create and save a SUMA task by using the command line, run the following command:
suma -w -a DisplayName=‘ AIX72TL2SP2‘ -a FilterML=‘7200-00‘
The command returns a task ID after the successful creation of a SUMA task:Task ID 10 created.
To create and schedule a task that downloads the latest fixes and adds a policy label through the DisplayName field (useful when you are listing policies through SMIT), run the following command:suma -s "30 2 15 * *" -a RqType=Latest \ -a DisplayName="Latest fixes - 15th Monthly"
In this example, the user scheduled the task to run on the 15th day of every month at 2:30 AM by using cron format.
To create and schedule a task that downloads the entire 7200-03 Technology Level into the /lppsrc/7203 directory on a specific day and time, run the following command:suma -s "0 23 * * 1" -a Action=Clean -a RqType=ML \ -a RqName=6100-03 -a DLTarget=/lppsrc/6103 \ -a FilterSysFile=/dev/null
This command also duplicates base levels and conflicting updates as well as runs alppmgr
clean operation after the download to remove superseded updates.Note: Before running a task that specifies Action=Clean, you can run the suma -c command to verify the SUMA global configuration settings that are used when runninglppmgr
. Setting REMOVE_SUPERSEDE, REMOVE_DUP_BASE_LEVELS, and REMOVE_CONFLICTING_UPDATES to yes results in the intended action of the preceding example.
Troubleshooting SUMA error messages
Ensure that you are entitled to download SUMA maintenance updates. If you are not entitled to download SUMA maintenance updates, check with your administrator and licensing team for assistance. Without entitlement, you encounter the following error message:
Error: Entitlement is required to download. The system's serial number is not entitled.
For other SUMA error messages, check your system log files for the time stamp of the operation, the IP address, and the port numbers of the fix distribution server. Following is an example of a SUMA error message that you might encounter if your system is misconfigured:
# /usr/sbin/suma -x -a Action=Metadata -a RqType=Latest -a FilterML=7100-02 -a DLTarget=/export/eznim/SUMA
0500-013 Failed to retrieve list from fix server.
- Ensure that the client's firewall connection is authenticated by establishing the telnet
connection to the fix distribution center
telnet www.ibm.com 443 telnet www.ibm.com 80
- Verify the connection by running the following
command:
# /usr/esa/bin/verifyConnectivity -t
- Verify that Electronic Customer Care (ECC) services are installed by running the following
command:
# /usr/ecc/bin/config_conn_path -c 'PRIMARY' -t 'YES'
- Check the SUMA log files at the following locations:
- /var/adm/ras/suma.log
- /var/adm/ras/suma_dl.log
- /var/suma/log/eccTrace0.0.log
- /var/esa/log
- /var/ecc/data/log/eccTrace0.0.log
- Edit the SUMA configuration to generate verbose log files by running the following
command:
suma -c -a SCREEN_VERBOSE=LVL_DEBUG \ -a LOGFILE_VERBOSE=LVL_DEBUG \ -a NOTIFY_VERBOSE=LVL_DEBUG
- Edit the configuration and rerun the SUMA task by performing the following steps:
- Go to the /var/suma/data/eccBase.properties properties file and set TRACE_LEVEL=info.
- Delete the log files in the /var/suma/log location.
- Enter the following command to rerun the SUMA
task:
/usr/sbin/suma -x -a Action=Metadata -a RqType=Latest -a FilterML=7100-02 \ -a DLTarget=/export/eznim/SUMA/7100-02/metadata
- Verify that the information in the log file is correct.